11 points | by justicz 19 hours ago ago
4 comments
"Don't worry, package signing is enough, you don't need https"
"Don't worry, emudhra is not bad, we have package signing" - Ubuntu
What's the fallback after both signing and https are broken?
Living in a cave.
https://lists.debian.org/debian-security-announce/2026/msg00...
"Don't worry, package signing is enough, you don't need https"
"Don't worry, emudhra is not bad, we have package signing" - Ubuntu
What's the fallback after both signing and https are broken?
Living in a cave.
https://lists.debian.org/debian-security-announce/2026/msg00...